New malware found on 30k Macs has security pros stumped

Re:New malware found on 30k Macs has security pros stumped by theamk on Saturday February 20, 2021 @03:25PM (#26207608)

Why not both? Trivial change (like embedded timestamp in a file) for every user, and advanced polymorphism for the times when the malware is detected.

I bet most researchers have tools to bin files together automatically based on the same MD5. Why make their life easier when this is so easy to defeat?

[ Parent | on HN ]

Re:New malware found on 30k Macs has security pros stumped by tgsovlerkhgsel on Saturday February 20, 2021 @04:13PM (#26208039)

Because many AV systems assume that any unknown file (unknown to their cloud service) is probably doing this, and thus probably malware.

[ Parent | on HN ]